Prerequisites For Policing; Guidelines And Limitations - Cisco Nexus 9000 Series Configuration Manual

Prerequisites for Policing

QoS applies the bandwidth limits specified in a shared policer cumulatively to all flows in the matched traffic.
A shared policer applies the same policer to more than one interface simultaneously.
For example, if you configure a shared policer to allow 1 Mbps for all Trivial File Transfer Protocol (TFTP)
traffic flows on VLAN 1 and VLAN 3, the device limits the TFTP traffic for all flows combined on VLAN
1 and VLAN 3 to 1 Mbps.
The following are guidelines for configuring shared policers:
• You create named shared policers by entering the qos shared-policer command. If you create a shared
• You define shared policers in a policy map class within the police command. If you attach a named
• Shared policing works independently on each module.
• When the shared policer is applied on interfaces or a VLAN with member ports that are across different
• Use the show qos shared-policer [type qos] [policer-name] command to display information about
Prerequisites for Policing
Policing has the following prerequisites:
• You must be familiar with using modular QoS CLI.
• You are logged on to the device.

Guidelines and Limitations

Policing has the following configuration guidelines and limitations:
• Egress QoS policing is not supported on Cisco Nexus 9500 platform switches with the following line
• The egress RACL and egress QoS features are not supported on the Cisco Nexus 9508 switch (Cisco
• Egress QoS policy statistics for CPU generated traffic are not supported on the following:
Cisco Nexus 9000 Series NX-OS Quality of Service Configuration Guide, Release 7.x
86
policer and create a policy using that shared policer and attach the policy to multiple ingress ports, the
device polices the matched traffic from all the ingress ports to which it is attached.
shared policer to multiple ingress ports, the device polices the matched traffic from all the ingress ports
to which it is attached.
cores or instances, the rate becomes two times the configured CIR rate.
shared policers.
cards:
• Cisco Nexus 9636C-R
• Cisco Nexus 9636Q-R
• Cisco Nexus 9636C-RX
• Cisco Nexus 96136YC-R
NX-OS Release 7.0(3)F3(3).
• Cisco Nexus 9200, 9300-EX, and 9300-FX platform switches
Configuring Policing